STARTTLS

STARTTLS is a command that upgrades an existing plaintext connection, most famously SMTP, to an encrypted TLS session. It allows encryption on the same port as unencrypted traffic, which eased adoption across email infrastructure. Because the upgrade is opportunistic, active attackers can strip it unless policies like MTA-STS or DANE require encryption.